Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    21-11-2024 09:13

General

  • Target

    Σπουδάζω Εργοθεραπεία!.mp4

  • Size

    5.1MB

  • MD5

    1f1f45d56195e14382ed52303e96b16f

  • SHA1

    bedeea8cd5948702e23da520a1dad4de618759ae

  • SHA256

    881bf1bf5880f7ff149fba3edf48efbd35935ad977b86a2a40974765903ab272

  • SHA512

    e4429bca6a47a1d44797dd20103de1bcb27018064704232c5f4738c957c9475dfc570d0859738aa7a1c10f061c4c99add050d58048fe2fc806f83d7de3613a1d

  • SSDEEP

    98304:WoHjWilp00rfyxZVwbcs+d0NSlGjt7UGepGa:WoDWs08f6Zu7+d4RhUGepGa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 27 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Σπουδάζω Εργοθεραπεία!.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2408-6-0x000007FEF7E70000-0x000007FEF7EA4000-memory.dmp

    Filesize

    208KB

  • memory/2408-5-0x000000013F1A0000-0x000000013F298000-memory.dmp

    Filesize

    992KB

  • memory/2408-9-0x000007FEFA920000-0x000007FEFA937000-memory.dmp

    Filesize

    92KB

  • memory/2408-13-0x000007FEF7310000-0x000007FEF732D000-memory.dmp

    Filesize

    116KB

  • memory/2408-14-0x000007FEF72F0000-0x000007FEF7301000-memory.dmp

    Filesize

    68KB

  • memory/2408-11-0x000007FEF7E50000-0x000007FEF7E67000-memory.dmp

    Filesize

    92KB

  • memory/2408-12-0x000007FEF7330000-0x000007FEF7341000-memory.dmp

    Filesize

    68KB

  • memory/2408-7-0x000007FEF6680000-0x000007FEF6936000-memory.dmp

    Filesize

    2.7MB

  • memory/2408-10-0x000007FEF8130000-0x000007FEF8141000-memory.dmp

    Filesize

    68KB

  • memory/2408-8-0x000007FEFB520000-0x000007FEFB538000-memory.dmp

    Filesize

    96KB

  • memory/2408-23-0x000007FEF6D70000-0x000007FEF6D8B000-memory.dmp

    Filesize

    108KB

  • memory/2408-30-0x000007FEF5270000-0x000007FEF52C7000-memory.dmp

    Filesize

    348KB

  • memory/2408-32-0x000007FEF6CC0000-0x000007FEF6CD7000-memory.dmp

    Filesize

    92KB

  • memory/2408-31-0x000007FEF50F0000-0x000007FEF5270000-memory.dmp

    Filesize

    1.5MB

  • memory/2408-29-0x000007FEF6CE0000-0x000007FEF6CF1000-memory.dmp

    Filesize

    68KB

  • memory/2408-28-0x000007FEF52D0000-0x000007FEF534C000-memory.dmp

    Filesize

    496KB

  • memory/2408-15-0x000007FEF55D0000-0x000007FEF6680000-memory.dmp

    Filesize

    16.7MB

  • memory/2408-27-0x000007FEF5350000-0x000007FEF53B7000-memory.dmp

    Filesize

    412KB

  • memory/2408-26-0x000007FEF6D00000-0x000007FEF6D30000-memory.dmp

    Filesize

    192KB

  • memory/2408-25-0x000007FEF6D30000-0x000007FEF6D48000-memory.dmp

    Filesize

    96KB

  • memory/2408-24-0x000007FEF6D50000-0x000007FEF6D61000-memory.dmp

    Filesize

    68KB

  • memory/2408-22-0x000007FEF6D90000-0x000007FEF6DA1000-memory.dmp

    Filesize

    68KB

  • memory/2408-21-0x000007FEF6DB0000-0x000007FEF6DC1000-memory.dmp

    Filesize

    68KB

  • memory/2408-20-0x000007FEF6DD0000-0x000007FEF6DE1000-memory.dmp

    Filesize

    68KB

  • memory/2408-19-0x000007FEF6DF0000-0x000007FEF6E08000-memory.dmp

    Filesize

    96KB

  • memory/2408-18-0x000007FEF72C0000-0x000007FEF72E1000-memory.dmp

    Filesize

    132KB

  • memory/2408-17-0x000007FEF6E10000-0x000007FEF6E51000-memory.dmp

    Filesize

    260KB

  • memory/2408-16-0x000007FEF53C0000-0x000007FEF55CB000-memory.dmp

    Filesize

    2.0MB

  • memory/2408-33-0x000007FEF3880000-0x000007FEF50EF000-memory.dmp

    Filesize

    24.4MB

  • memory/2408-34-0x000007FEF3670000-0x000007FEF3876000-memory.dmp

    Filesize

    2.0MB

  • memory/2408-36-0x000007FEF3600000-0x000007FEF3642000-memory.dmp

    Filesize

    264KB

  • memory/2408-35-0x000007FEF3650000-0x000007FEF3662000-memory.dmp

    Filesize

    72KB

  • memory/2408-37-0x000007FEF35B0000-0x000007FEF35FD000-memory.dmp

    Filesize

    308KB

  • memory/2408-38-0x000007FEF3140000-0x000007FEF3151000-memory.dmp

    Filesize

    68KB

  • memory/2408-39-0x000007FEF3120000-0x000007FEF3136000-memory.dmp

    Filesize

    88KB

  • memory/2408-40-0x000007FEF3050000-0x000007FEF3115000-memory.dmp

    Filesize

    788KB

  • memory/2408-41-0x000007FEF3000000-0x000007FEF3042000-memory.dmp

    Filesize

    264KB

  • memory/2408-42-0x000007FEF2F90000-0x000007FEF2FF2000-memory.dmp

    Filesize

    392KB

  • memory/2408-44-0x000007FEF2F00000-0x000007FEF2F13000-memory.dmp

    Filesize

    76KB

  • memory/2408-46-0x000007FEF2BA0000-0x000007FEF2BB1000-memory.dmp

    Filesize

    68KB

  • memory/2408-48-0x000007FEF2B60000-0x000007FEF2B75000-memory.dmp

    Filesize

    84KB

  • memory/2408-47-0x000007FEF2B80000-0x000007FEF2B92000-memory.dmp

    Filesize

    72KB

  • memory/2408-45-0x000007FEF2EE0000-0x000007FEF2EF4000-memory.dmp

    Filesize

    80KB

  • memory/2408-43-0x000007FEF2F20000-0x000007FEF2F8D000-memory.dmp

    Filesize

    436KB

  • memory/2408-49-0x000007FEF2880000-0x000007FEF29FA000-memory.dmp

    Filesize

    1.5MB

  • memory/2408-52-0x000007FEF2640000-0x000007FEF2651000-memory.dmp

    Filesize

    68KB

  • memory/2408-51-0x000007FEF2B10000-0x000007FEF2B23000-memory.dmp

    Filesize

    76KB

  • memory/2408-50-0x000007FEF2B30000-0x000007FEF2B53000-memory.dmp

    Filesize

    140KB

  • memory/2408-53-0x000007FEF25D0000-0x000007FEF2631000-memory.dmp

    Filesize

    388KB

  • memory/2408-54-0x000007FEF2580000-0x000007FEF25C7000-memory.dmp

    Filesize

    284KB

  • memory/2408-55-0x000007FEF2500000-0x000007FEF2574000-memory.dmp

    Filesize

    464KB

  • memory/2408-56-0x000007FEF2390000-0x000007FEF23A1000-memory.dmp

    Filesize

    68KB

  • memory/2408-57-0x000007FEF0540000-0x000007FEF058E000-memory.dmp

    Filesize

    312KB

  • memory/2408-58-0x000007FEEFD60000-0x000007FEEFDB7000-memory.dmp

    Filesize

    348KB

  • memory/2408-59-0x000007FEF1CD0000-0x000007FEF1D04000-memory.dmp

    Filesize

    208KB